Privacy Policy

Keep My Kin is operated by MediPaid Technologies Inc., the personal information controller for the data described here. Questions, requests and complaints about privacy go to our Data Protection Officer at dpo@medipaid.tech.

This policy is written around the principles of the Philippine Data Privacy Act and privacy-by-design. It requires final DPO and legal review before commercial launch, and it does not claim certification under any regulation.

Account information. Your email address, display name, timezone, and — if you sign in with Google or Facebook — the basic profile those providers return. We never receive your password from them.

Family information. Your family name, timezone, the members you add, their relationship to you, and optionally their date of birth and bedtime.

Children’s profile information. A child’s first name, relationship, and optionally birthday and photograph, entered by a guardian. Children have no accounts, no logins and no discoverable presence.

The memories themselves. Photographs, videos, voice and video recordings, scanned drawings, letters, cards and documents, plus the meaning you attach to them: titles, stories, dates, ages, occasions, tags and voice narrations.

Payment metadata. Amount, currency, method, status and the payment provider’s reference. We do not receive or store your full card number or security code.

Technical and product information. Basic device and request data, and privacy-conscious product events (for example “a Tuck-In was scheduled”) recorded in our own database. These events deliberately carry counts and labels only — never file names, stories, children’s names, or any part of your media.

• To provide the service: storing your memories and showing them to your family
• To deliver scheduled messages at the right local time for the recipient
• To generate the exports you ask for
• To operate accounts, invitations and access control
• To take payment and provide billing support
• To keep the service secure and investigate abuse
• To understand which features families actually use, in aggregate

We do not sell your information, we do not build advertising profiles, and we do not use your family’s content to train machine-learning models.

We use a small number of service providers, each with access limited to what their function requires:

• Supabase — authentication and the database holding your account, family and memory records
• Cloudflare R2 — private object storage holding your media files
• Vercel — application hosting and delivery
• Google and Meta — only if you choose to sign in with them
• PayPal and Xendit — payment processing
• An email provider — transactional email such as confirmations and notifications

Some of these process data outside the Philippines. Where that happens we rely on the provider’s contractual safeguards.

Access is enforced in the database itself, through row-level security policies, rather than only in the interface. A request from an account outside your family returns nothing — not an error revealing that something exists, and not a partial record.

Media files are held in private storage with no public URLs. Each view is served through a short-lived signed link, minted only after the same family check the database would apply. Revoking someone’s access takes effect on their next request.

We describe this as private by design. We do not claim that any system is perfectly secure, and we will notify you and the National Privacy Commission as required if a breach affecting your data occurs.

Keep My Kin is used by adults on behalf of their families. Children do not register, do not have credentials, do not appear in any directory, and cannot be discovered or contacted by anyone outside the family a guardian created.

A guardian can switch off a child’s Child Mode access, edit or delete their profile, and delete any memory about them at any time.

We keep your content while your account is open, because that is the point of the service. When you delete a memory we remove the underlying files that nothing else in your family still references. When you close your account we delete your family’s content, retaining only what we must for legal, tax or fraud-prevention purposes — for example transaction records.

Backups roll off on their own schedule, so deletion may take a short period to propagate through them.

Subject to applicable law, you may ask us to give you access to your personal data, correct it, delete it, restrict or object to certain processing, or provide it in a portable form. Keep My Kin also lets you download your original files directly, on any plan.

To exercise a right, contact dpo@medipaid.tech. You may also complain to the National Privacy Commission.

We will post any updated policy here with a new date, and give notice in the app for material changes.

Data Protection Officer: dpo@medipaid.tech
General support: support@keepmykin.com